
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier: mfsDpe069t0585sKHJspDa9JEgDVsIn2BLdiGVmGV2U=
Subject key identifier: FD:C5:BF:48:1D:22:79:4B:D8:DF:4D:EF:10:10:F4:F0:28:44:28:91
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 0895
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number: 088C
Signing time: Mon 22 Jun 2026 20:39:36 +0000
Manifest this update: Mon 22 Jun 2026 20:39:35 +0000
Manifest next update: Mon 29 Jun 2026 20:39:35 +0000
Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: pMHy+NzCKsktPf3O1C/7p3bYKDCu+s+yVkHLmKsokc8=)
2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Jun 22 20:39:35 2026 GMT
Not After : Jun 29 20:39:35 2026 GMT
Subject: CN=6a399d88-7411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:32:7a:c3:94:49:51:09:55:d9:ec:f3:2a:0f:
f3:32:a8:71:82:0b:36:78:0b:2b:1e:7e:33:22:28:
85:58:9d:97:16:02:9d:e8:b1:44:cb:d1:7a:67:a8:
81:d8:41:3f:4a:59:b7:a7:c8:91:1a:3a:34:be:16:
b5:ab:b0:52:fe:f2:f6:a6:b3:a7:bb:79:52:82:db:
1c:9b:72:fa:de:9d:a1:68:bf:9a:c0:f6:93:b6:26:
a1:58:7d:40:e1:1f:d6:66:3e:c9:a0:f4:f6:e9:7f:
c2:54:5c:aa:22:9c:2b:c1:d9:d0:55:91:38:4f:08:
21:d8:2c:c4:37:cc:3b:45:b9:27:88:30:ae:03:d4:
c0:c4:4b:b0:e7:c1:0c:0c:f1:44:42:94:e7:d7:23:
9e:49:8f:60:9d:f5:90:af:d4:2b:de:11:f4:92:8a:
80:23:6e:f9:40:8c:27:4d:7d:52:42:8d:3a:e5:7b:
65:f6:25:b9:5f:35:43:c6:10:53:cf:fe:73:e6:c7:
c1:59:11:b5:8f:21:26:5e:5c:cf:84:18:a5:b1:4b:
b7:1e:02:c3:9a:1f:db:31:5e:e3:af:66:58:5f:ca:
84:f7:2a:0d:83:01:87:0c:83:cf:25:33:6f:b5:7f:
8c:9b:75:3e:b6:70:17:0c:a9:85:a0:f8:43:57:4a:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:BF:48:1D:22:79:4B:D8:DF:4D:EF:10:10:F4:F0:28:44:28:91
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:9d:bb:a5:1a:e8:4d:0f:40:80:71:30:4f:8b:53:d1:a6:2a:
12:7a:04:b7:95:f7:30:0d:7e:f8:31:d6:6c:0a:57:b4:c0:89:
6e:fb:95:10:b5:54:90:22:de:64:be:cf:f6:14:64:18:62:82:
46:ea:4f:94:8a:1d:32:11:e8:3a:00:28:64:99:48:ad:dc:9c:
f3:6a:07:f3:86:76:dd:2b:ad:ed:32:f9:cb:33:e5:b3:5b:bb:
93:7c:7c:e3:85:c9:e2:cc:39:d4:a6:7f:69:56:ff:25:56:eb:
fc:9d:3b:8e:4e:7a:21:b6:61:90:29:65:8a:94:09:81:b2:68:
a5:6a:47:f4:f0:5a:b1:fa:8b:bf:5e:9f:6c:1c:0a:8a:8e:7b:
df:6b:ec:0a:f1:e0:f8:56:3f:78:03:38:46:1f:d5:f3:e4:ce:
58:f3:ab:03:36:51:95:99:73:52:8f:37:b7:eb:b6:33:f2:58:
3e:9e:4f:98:4b:e4:32:f9:eb:ad:e7:06:bc:f1:c3:35:26:87:
f7:be:51:1c:5d:41:2f:5d:7e:2b:85:8d:88:f7:5e:16:3c:b9:
28:f2:95:bb:67:46:1e:ec:d4:ce:e6:4b:76:f7:2d:d9:d9:0d:
9a:06:59:c9:7e:56:95:cf:74:a7:52:45:92:81:b6:6d:fa:b2:
f8:24:bd:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFBRjIxMTAvBgNVBAUTKEIxQTE4QzIwNjc3NThGRThDOTIxOTgxRThCMTFGQTMw
OEU2MjY5M0IwHhcNMjYwNjIyMjAzOTM1WhcNMjYwNjI5MjAzOTM1WjAYMRYwFAYD
VQQDEw02YTM5OWQ4OC03NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgzJ6w5RJUQlV2ezzKg/zMqhxggs2eAsrHn4zIiiFWJ2XFgKd6LFEy9F6Z6iB
2EE/Slm3p8iRGjo0vha1q7BS/vL2prOnu3lSgtscm3L63p2haL+awPaTtiahWH1A
4R/WZj7JoPT26X/CVFyqIpwrwdnQVZE4Twgh2CzEN8w7RbkniDCuA9TAxEuw58EM
DPFEQpTn1yOeSY9gnfWQr9Qr3hH0koqAI275QIwnTX1SQo065Xtl9iW5XzVDxhBT
z/5z5sfBWRG1jyEmXlzPhBilsUu3HgLDmh/bMV7jr2ZYX8qE9yoNgwGHDIPPJTNv
tX+Mm3U+tnAXDKmFoPhDV0raMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3Fv0gd
InlL2N9N7xAQ9PAoRCiRMB8GA1UdIwQYMBaAFLGhjCBndY/oySGYHosR+jCOYmk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUFGMi84MjI2QUI3MkY3
MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWotakpJWmdlaXhINk1JNWlh
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NhR01JR2Qxai1qSklaZ2VpeEg2TUk1aWFUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUFGMi84MjI2QUI3MkY3MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWot
akpJWmdlaXhINk1JNWlhVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOZ27pRroTQ9AgHEwT4tT0aYqEnoEt5X3MA1++DHWbApXtMCJbvuVELVUkCLe
ZL7P9hRkGGKCRupPlIodMhHoOgAoZJlIrdyc82oH84Z23Sut7TL5yzPls1u7k3x8
44XJ4sw51KZ/aVb/JVbr/J07jk56IbZhkCllipQJgbJopWpH9PBasfqLv16fbBwK
io5732vsCvHg+FY/eAM4Rh/V8+TOWPOrAzZRlZlzUo83t+u2M/JYPp5PmEvkMvnr
recGvPHDNSaH975RHF1BL11+K4WNiPdeFjy5KPKVu2dGHuzUzuZLdvct2dkNmgZZ
yX5Wlc90p1JFkoG2bfqy+CS9BQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:58 2026 by rpki-client